Code
Hub
Workspaces
Following
Trending
Connect
MCP
copy
Create free account
hub
/
github.com/Cosmian/kms
/ functions
Functions
10,279 in github.com/Cosmian/kms
⨍
Functions
10,279
◇
Types & classes
2,373
↓ 8 callers
Method
is_wrapped
(&self)
crate/kmip/src/kmip_2_1/kmip_objects.rs:449
↓ 8 callers
Method
locate
This operation requests that the server search for one or more Managed Objects, depending on the attributes specified in the request. All attributes a
crate/server/src/core/kms/kmip.rs:538
↓ 8 callers
Function
make_state
(with_token_secret: bool)
crate/clients/k8s/operator/src/webhook.rs:323
↓ 8 callers
Function
ml_kem_encapsulate
(public_key_der: &[u8])
crate/crypto/src/crypto/pqc/ml_kem.rs:51
↓ 8 callers
Function
objMap
(s,o)
crate/server/documentation/swagger-ui/swagger-ui-bundle.js:2
↓ 8 callers
Method
pkcs_der_bytes
Return the PKCS#1 or PKCS#8 or PKCS#12 DER bytes of a key
crate/kmip/src/kmip_2_1/kmip_data_structures.rs:371
↓ 8 callers
Method
print
intentional: CLI output to stdout
crate/clients/clap/src/actions/tokenize/mod.rs:34
↓ 8 callers
Function
provision_xks_key
Provision an XKS key through the public `create_key` path with the given caller ARN.
crate/server/src/routes/aws_xks/tests.rs:150
↓ 8 callers
Method
refresh
Fetch again all JWKS using the `uris`. The threshold to refresh JWKS is set to `REFRESH_INTERVAL`.
crate/server/src/middlewares/jwt/jwks.rs:101
↓ 8 callers
Method
register
(s,o=!0)
crate/server/documentation/swagger-ui/swagger-ui-bundle.js:2
↓ 8 callers
Function
resolve_plaintext
Resolve the plaintext for a request: either literal `data_plaintext` or generated via `data_plaintext_generator`.
crate/server/src/tests/jose/jose_vectors.rs:84
↓ 8 callers
Method
retrieve_tags
Retrieve the tags of the object with the given `uid`
crate/server_database/src/core/database_objects.rs:341
↓ 8 callers
Function
revoke_cert
Revoke a certificate using the given reason code.
crate/test_kms_server/src/crl_tests.rs:28
↓ 8 callers
Function
revoked_serials
Parse DER CRL with `x509_parser` and return the serial numbers of revoked entries.
crate/server/src/tests/crl_tests.rs:250
↓ 8 callers
Method
serialize_field
(&mut self, value: &T)
crate/kmip/src/ttlv/kmip_ttlv_serializer.rs:642
↓ 8 callers
Function
setup_observing_metrics
()
crate/server/src/core/otel_metrics.rs:645
↓ 8 callers
Function
setup_openssl_fips_provider
Helper to load FIPS provider before each test (if needed)
crate/crypto/src/crypto/symmetric/rfc5649.rs:128
↓ 8 callers
Function
start_test_server_with_patch
Start a test server from a TOML config file, applying a runtime patch to the config. Use this when you need to inject runtime-determined values (e.g.
crate/test_kms_server/src/test_server.rs:1325
↓ 8 callers
Method
to_cryptographic_parameters
(self, hash_fn: HashFn)
crate/clients/client_utils/src/rsa_utils.rs:22
↓ 8 callers
Method
to_security_status
(&self)
crate/clients/cng/src/error.rs:75
↓ 8 callers
Method
track
(&mut self, id: impl Into<String>)
crate/test_kms_server/src/certify_tests.rs:34
↓ 8 callers
Function
uploadFile
(page: Page, filePath: string)
ui/tests/e2e/helpers.ts:427
↓ 8 callers
Function
uriToPointer
crate/server/documentation/swagger-ui/swagger-ui-bundle.js:2
↓ 8 callers
Function
useIsExpanded
()
crate/server/documentation/swagger-ui/swagger-ui-bundle.js:2
↓ 8 callers
Function
useIsExpandedDeeply
()
crate/server/documentation/swagger-ui/swagger-ui-bundle.js:2
↓ 8 callers
Method
verify
( &self, _algorithm: &SignatureAlgorithm, _data: &[u8], _signature: &[u8],
crate/clients/pkcs11/module/src/tests.rs:841
↓ 8 callers
Function
wrap_and_cache
Wrap the object using a wrapping key from the database or HSM, then cache the unwrapped copy.
crate/server/src/core/wrapping/wrap.rs:28
↓ 8 callers
Function
wrap_object
Wrap an Object with a wrapping key The wrapping key is fetched from the database The key is wrapped using the wrapping key # Arguments `object` - the
crate/server/src/core/wrapping/wrap.rs:141
↓ 8 callers
Function
xor_split
Split `secret` into `total_parts` shares using XOR (*n*-of-*n* scheme). All `total_parts` shares are required to reconstruct the secret. The first `t
crate/crypto/src/crypto/split_key/mod.rs:32
↓ 7 callers
Function
Vb
(s)
crate/server/documentation/swagger-ui/swagger-ui-bundle.js:2
↓ 7 callers
Function
Xi
(s,o,i,u)
crate/server/documentation/swagger-ui/swagger-ui-bundle.js:2
↓ 7 callers
Method
add
Add a permission to the user on an object
crate/server_database/src/stores/redis/permissions.rs:224
↓ 7 callers
Method
alphabet_len
(&self)
crate/crypto/src/crypto/fpe/alphabet.rs:211
↓ 7 callers
Function
assertNotInfinite
(s)
crate/server/documentation/swagger-ui/swagger-ui-bundle.js:2
↓ 7 callers
Function
cache
(max_age: Duration)
crate/server_database/src/core/object_cache.rs:172
↓ 7 callers
Function
ckm_rsa_pkcs_oaep_key_unwrap
Key Unwrap using `CKM_RSA_PKCS_OAEP` a.k.a PKCS #1 RSA OAEP as specified in PKCS#11 v2.40 available at <http://docs.oasis-open.org/pkcs11/pkcs11-curr
crate/crypto/src/crypto/rsa/ckm_rsa_pkcs_oaep.rs:136
↓ 7 callers
Function
cleanup_temp
(path: &PathBuf)
crate/server/src/config/command_line/clap_config.rs:817
↓ 7 callers
Function
config_only_co_kms
(co_users: Vec<String>)
crate/server/src/tests/key_ceremony_tests.rs:120
↓ 7 callers
Function
create_rsa_key_pair_rest
Generate an RSA key pair via `POST /v1/crypto/keys` and return `(kid_private, kid_public)`. Uses the REST endpoint (dogfoods `/v1/crypto/keys`) rathe
crate/server/src/tests/jose/common.rs:195
↓ 7 callers
Function
create_secret_data
( cli_conf_path: &str, action: &CreateSecretDataAction, )
crate/clients/ckms/src/tests/secret_data/create_secret.rs:16
↓ 7 callers
Function
criterion_home
()
crate/clients/clap/src/actions/bench/output.rs:90
↓ 7 callers
Function
decrypt
Decrypt a file using the given private key
crate/clients/ckms/src/tests/cover_crypt/encrypt_decrypt.rs:54
↓ 7 callers
Method
decrypt_object
(&self, uid: &str, ciphertext: &[u8])
crate/server_database/src/stores/redis/objects_db.rs:181
↓ 7 callers
Method
delete
Delete an object from the database.
crate/server_database/src/core/database_objects.rs:401
↓ 7 callers
Function
derive_key
Run `ckms derive-key` via the CLI and return the derived key unique identifier
crate/clients/ckms/src/tests/derive_key/derive_key_tests.rs:36
↓ 7 callers
Method
destroy
This operation is used to indicate to the server that the key material for the specified Managed Object SHALL be destroyed or rendered inaccessible. T
crate/clients/client/src/kms_rest_client.rs:235
↓ 7 callers
Function
deterministic_rng
()
crate/crypto/src/crypto/split_key/mod.rs:136
↓ 7 callers
Method
disable_crypto_officer_ceremony
Disable an active Crypto Officer ceremony (revoke the DB activation record). Two revocation paths: - **Self-revoke** (`target_user = None`): the call
crate/server/src/core/kms/permissions.rs:414
↓ 7 callers
Method
ec_raw_bytes
Extract the raw bytes from the EC key material. These bytes are the same as the ones in openssl rwa bytes
crate/kmip/src/kmip_2_1/kmip_data_structures.rs:398
↓ 7 callers
Function
encrypt
Encrypts a file using the given public key and access policy.
crate/clients/ckms/src/tests/cover_crypt/encrypt_decrypt.rs:20
↓ 7 callers
Function
encrypt_data
Helper: encrypt data using a key. Returns the full ciphertext as `iv || ciphertext || tag` — the format expected by the decrypt oracle in `decrypt_us
crate/server/src/tests/hsm/permissions.rs:98
↓ 7 callers
Function
encrypt_inner
( _req_http: HttpRequest, request: EncryptRequest, key_id_or_tags: String, kms: &Arc<KMS>, )
crate/server/src/routes/aws_xks/encrypt_decrypt/encrypt_.rs:261
↓ 7 callers
Function
ensure_url_string
Resolve the database URL from the command-line option or an environment variable, returning the raw string. This avoids `Url::parse()` which cannot h
crate/server/src/config/command_line/db.rs:333
↓ 7 callers
Function
fetch_crl_der
Fetch a CRL (DER format) for the given CA certificate ID.
crate/test_kms_server/src/crl_tests.rs:44
↓ 7 callers
Method
format
()
crate/server/documentation/swagger-ui/swagger-ui-bundle.js:2
↓ 7 callers
Method
get_algorithms
Retrieve the list of supported cryptographic algorithms for a given HSM slot. This function queries the specified slot to determine which algorithms
crate/hsm/base_hsm/src/base_hsm.rs:157
↓ 7 callers
Function
get_json_with_uri
(app: &S, uri: &str)
crate/server/src/tests/test_utils.rs:462
↓ 7 callers
Function
get_redis_url
()
crate/server_database/src/tests/mod.rs:48
↓ 7 callers
Method
headers
(&self)
crate/clients/client/src/http_client/client.rs:244
↓ 7 callers
Method
hsm_lib
Get a reference to the underlying `HsmLib` for direct PKCS#11 function calls.
crate/hsm/base_hsm/src/base_hsm.rs:40
↓ 7 callers
Method
identify
(s)
crate/server/documentation/swagger-ui/swagger-ui-bundle.js:2
↓ 7 callers
Function
import_encrypt_decrypt
( filename: &str, encryption_algorithm: Option<RsaEncryptionAlgorithm>, )
crate/clients/ckms/src/tests/certificates/encrypt.rs:208
↓ 7 callers
Function
isFunc
(s)
crate/server/documentation/swagger-ui/swagger-ui-bundle.js:2
↓ 7 callers
Function
isObject
(s)
crate/server/documentation/swagger-ui/swagger-ui-bundle.js:2
↓ 7 callers
Function
isOrdered
(s)
crate/server/documentation/swagger-ui/swagger-ui-bundle.js:2
↓ 7 callers
Method
is_object_owned_by
Test if an object identified by its `uid` is currently owned by `owner`
crate/server_database/src/core/database_objects.rs:413
↓ 7 callers
Function
jg
()
crate/server/documentation/swagger-ui/swagger-ui-bundle.js:2
↓ 7 callers
Function
join_shares
Reconstruct from the given share UIDs; return the reconstructed key UID.
crate/server/src/tests/key_ceremony_tests.rs:167
↓ 7 callers
Method
key_wrapping_data
(&self)
crate/kmip/src/kmip_2_1/kmip_objects.rs:413
↓ 7 callers
Function
kmip_certificate_to_openssl
(certificate: &Object)
crate/crypto/src/openssl/certificate.rs:27
↓ 7 callers
Function
load_raw_private_key
( algorithm_name: &str, raw_bytes: &[u8], )
crate/crypto/src/crypto/pqc/mod.rs:310
↓ 7 callers
Function
load_raw_public_key
( algorithm_name: &str, raw_bytes: &[u8], )
crate/crypto/src/crypto/pqc/mod.rs:277
↓ 7 callers
Method
locate
This operation requests that the server search for one or more Managed Objects, depending on the attributes specified in the request. All attributes a
crate/clients/client/src/kms_rest_client.rs:470
↓ 7 callers
Function
locate_keys
( owner: &str, kms: &Arc<KMS>, attributes: Option<Attributes>, )
crate/server/src/tests/hsm/mod.rs:212
↓ 7 callers
Method
name
(&self)
crate/clients/clap/src/actions/bench/load.rs:85
↓ 7 callers
Function
ncrypt_length_property
()
crate/clients/clap/src/actions/cng_verify.rs:86
↓ 7 callers
Function
normalizeArray
(s)
crate/server/documentation/swagger-ui/swagger-ui-bundle.js:2
↓ 7 callers
Function
parse_jwks
Fetch a JWKS from the provided URI and parse it. This function will log errors for invalid JWKs but it will not stop the process if one fails. It ret
crate/server/src/middlewares/jwt/jwks.rs:196
↓ 7 callers
Function
random_key
Generate a random key using a cryptographically secure random number generator that is suitable for use with FPE
crate/crypto/src/crypto/fpe/tests.rs:19
↓ 7 callers
Function
reject_reserved_aws_xks_identity
Reject the reserved AWS XKS service identity on externally-derived auth paths.
crate/server/src/middlewares/mod.rs:96
↓ 7 callers
Method
remote_id
(&self)
crate/clients/pkcs11/module/src/core/object.rs:77
↓ 7 callers
Method
remove_link
Remove the link from the attributes
crate/kmip/src/kmip_2_1/kmip_attributes.rs:619
↓ 7 callers
Function
revoke_key
(key_uid: &str, owner: &str, kms: &Arc<KMS>)
crate/server/src/tests/hsm/mod.rs:315
↓ 7 callers
Function
rsa_wide
()
crate/clients/clap/src/actions/cng_verify.rs:74
↓ 7 callers
Function
run_auto_rotation
Rotate all keys that are past their scheduled rotation time. Queries the database for Active keys whose `rotate_interval` has elapsed since their las
crate/server/src/core/operations/auto_rotate.rs:49
↓ 7 callers
Method
serial_number
(&self)
crate/clients/pkcs11/provider/src/pkcs11_certificate.rs:89
↓ 7 callers
Method
serialize_i32
(self, v: i32)
crate/kmip/src/ttlv/kmip_ttlv_serializer.rs:168
↓ 7 callers
Function
set_key_property_dword
( dll: &KspDll, h_provider: usize, h_key: usize, prop_name: &[u16], va
crate/clients/clap/src/actions/cng_verify.rs:194
↓ 7 callers
Method
setup_with_lifecycle
( &mut self, object_type: ObjectType, requested_activation_date: Option<OffsetDateTime
crate/server/src/core/operations/key_ops/crypto_op.rs:84
↓ 7 callers
Method
shift
()
crate/server/documentation/swagger-ui/swagger-ui-bundle.js:2
↓ 7 callers
Function
source
(s)
crate/server/documentation/swagger-ui/swagger-ui-bundle.js:2
↓ 7 callers
Method
stop_server
(self)
crate/test_kms_server/src/test_server.rs:957
↓ 7 callers
Method
tag_size
(&self)
crate/crypto/src/crypto/symmetric/symmetric_ciphers.rs:230
↓ 7 callers
Function
to_path
crate/server/documentation/swagger-ui/swagger-ui-bundle.js:2
↓ 7 callers
Function
unwrap_object
Unwrap an Object This function is used to unwrap an object # Arguments `object` - the object to unwrap `kms` - the KMS `user` - the user accessing th
crate/server/src/core/wrapping/unwrap.rs:35
↓ 7 callers
Method
update_state
Update the state of an object in the database.
crate/server_database/src/core/database_objects.rs:390
↓ 7 callers
Method
with_context
(self, op: O)
crate/server/src/result.rs:45
↓ 7 callers
Function
write_kmip_object_to_file
Writes a KMIP Object to a JSON TTLV in a file. # Errors If the file cannot be opened or written, an error is returned.
crate/clients/client/src/file_utils.rs:96
↓ 7 callers
Function
write_temp
(contents: &str)
crate/server/src/config/command_line/clap_config.rs:804
↓ 7 callers
Function
xor_join
Reconstruct the secret from *all* XOR shares. `secret[i] = shares[0][i] XOR shares[1][i] XOR ... XOR shares[n-1][i]` The returned secret is wrapped
crate/crypto/src/crypto/split_key/mod.rs:81
← previous
next →
501–600 of 10,279, ranked by callers